$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa File: 28e68c3f-20e0-38e6-9057-bf4b7475db74.roa (raw, json) Hash identifier: MU7xAX3XRur6yCQadXOFQhof7QXVNJDZv5JC0MxNpbE= Subject key identifier: 81:AB:A3:01:8D:80:EF:CF:1E:91:23:14:F7:22:7D:66:10:F1:0D:1D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A612B1C9CAF162752E0DB3300 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 5650 IP address blocks: 104.251.84.0/24 maxlen: 24 104.251.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1c:9c:af:16:27:52:e0:db:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=1fdb4b72-a14a-4c10-9230-9d08630c053e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:b3:b7:99:fa:e0:be:d6:60:58:16:c8:0a: e5:35:72:9b:3e:e0:47:3e:aa:23:77:9b:47:9a:45: ab:3a:8f:37:06:17:45:97:8c:44:c9:d2:c8:bd:58: 70:10:0e:2c:69:78:b7:f1:31:f6:26:32:7a:41:91: 8a:11:c6:52:4e:35:79:da:70:09:85:da:62:c2:7b: f0:cd:01:1c:f1:4a:aa:9f:8f:68:cd:cf:ff:f5:02: a7:e4:32:56:21:f8:be:0b:78:a8:c8:55:32:ec:e3: 76:dd:97:c2:2e:b3:10:9a:d4:71:c3:df:45:22:3d: a0:be:45:3a:9a:fe:07:46:76:4f:99:a0:3c:3b:58: 8e:3d:49:fd:ae:46:72:1c:8c:e6:00:90:18:01:d3: 12:d7:41:43:95:73:de:25:df:e4:05:4f:fb:aa:ad: 1f:81:40:07:b1:72:c5:a7:46:f1:8b:3e:23:07:c8: c1:c0:ae:7f:74:5e:f2:d8:ef:1f:80:f5:62:11:4c: 9d:ff:02:ab:99:a2:60:d2:3b:c7:65:c1:84:3a:e4: dd:fb:fe:37:a2:01:d8:1b:55:3a:d6:6a:aa:a9:f9: 8e:20:69:0b:b0:ff:a1:86:ff:13:a3:54:44:9f:ff: e3:fa:fb:53:71:ed:f5:5a:ad:29:57:71:51:92:26: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:A3:01:8D:80:EF:CF:1E:91:23:14:F7:22:7D:66:10:F1:0D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.84.0/24 104.251.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6c:4c:8a:bb:f5:71:23:3e:c6:f6:c0:0b:e5:a0:1b:51:d9: 01:95:fb:71:06:76:73:63:3e:f0:6d:b1:34:52:9f:ef:6d:b6: 3b:05:75:d0:f4:1b:5d:57:56:62:02:1d:28:09:4d:0f:d4:90: 0a:e6:07:dc:d0:b1:87:16:e1:a3:16:7a:0d:b8:50:6c:9c:fd: df:68:35:be:31:b2:db:0b:4c:84:33:ff:87:a3:b7:df:f0:58: ad:55:e4:f8:13:d4:a2:d4:26:e1:b2:b8:8e:9d:6b:75:9f:e0: 4c:ad:1b:c7:c6:ab:83:bd:be:a9:cf:67:bd:f9:1d:b0:56:aa: 52:3e:aa:39:25:e5:da:26:31:6e:2a:27:a5:b9:29:1a:ac:69: 16:6d:fb:c5:3f:38:a9:2d:65:b2:16:64:04:56:d5:f8:0c:b6: f3:a6:1f:13:c6:e5:c1:86:63:b9:5d:88:16:2c:02:08:79:2d: 2c:01:af:ee:03:2b:1a:ac:f4:f0:a4:18:85:d7:b5:33:59:3c: 07:09:06:59:89:6c:e2:b4:4b:6d:9c:ea:0f:72:04:ff:0e:10: 0d:9c:2c:c4:cd:4c:7b:c9:3f:b2:98:80:9e:37:d3:19:3d:a0: 4f:2d:15:fb:06:66:7c:28:99:e1:f7:66:e0:31:45:c0:1c:f2: e5:49:da:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEphKxycrxYnUuDbMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MWZkYjRiNzItYTE0YS00YzEwLTkyMzAtOWQwODYzMGMwNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9uzt5n64L7WYFgWyArlNXKbPuBHPqojd5tH mkWrOo83BhdFl4xEydLIvVhwEA4saXi38TH2JjJ6QZGKEcZSTjV52nAJhdpiwnvw zQEc8Uqqn49ozc//9QKn5DJWIfi+C3ioyFUy7ON23ZfCLrMQmtRxw99FIj2gvkU6 mv4HRnZPmaA8O1iOPUn9rkZyHIzmAJAYAdMS10FDlXPeJd/kBU/7qq0fgUAHsXLF p0bxiz4jB8jBwK5/dF7y2O8fgPViEUyd/wKrmaJg0jvHZcGEOuTd+/43ogHYG1U6 1mqqqfmOIGkLsP+hhv8To1REn//j+vtTce31Wq0pV3FRkib7GQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIGrowGNgO/PHpEjFPcifWYQ8Q0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjhlNjhjM2YtMjBlMC0z OGU2LTkwNTctYmY0Yjc0NzVkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtUAwQA aPtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF5sTIq79XEjPsb2wAvloBtR2QGV+3EGdnNjPvBtsTRSn+9t tjsFddD0G11XVmICHSgJTQ/UkArmB9zQsYcW4aMWeg24UGyc/d9oNb4xstsLTIQz /4ejt9/wWK1V5PgT1KLUJuGyuI6da3Wf4EytG8fGq4O9vqnPZ735HbBWqlI+qjkl 5domMW4qJ6W5KRqsaRZt+8U/OKktZbIWZARW1fgMtvOmHxPG5cGGY7ldiBYsAgh5 LSwBr+4DKxqs9PCkGIXXtTNZPAcJBlmJbOK0S22c6g9yBP8OEA2cLMTNTHvJP7KY gJ430xk9oE8tFfsGZnwomeH3ZuAxRcAc8uVJ2mM= -----END CERTIFICATE-----Generated at Wed Jul 9 17:37:03 2025 by rpki-client